Skilltech Privacy Policy 2025 

Version: 4.0 (21/10/2025)

Skilltech Solutions is committed to protecting the personal data provided to it by its client organisations. The client organisations are the Data Controllers for the data provided to Skilltech Solutions. This means that they determine what data is provided, the manner in which data is processed, and how long the data is retained. 

Skilltech Solutions are Data Processors for this data, which means that they act directly on the instructions provided to them by the client organisation (Data Controller). 

This Privacy Policy explains how Skilltech Solutions processes personal data on behalf of Data Controllers, which security measures are in place, and how Skilltech Solutions complies with contractual and legal obligations.  

We only process client data and/or personal data fairly, lawfully and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

1. Contact details

If you have any questions about this policy or how we process client / personal data, please contact: 

  • Post: Data Protection Officer, Lifetime Training Group, 291 Paintworks, Arnos Vale, Bristol, BS4 3AW 
  • Telephone: 0333 0143 669 (Mon–Fri: 9am–5.30pm) 

(* Skilltech Solutions Limited is part of the Lifetime Training Group.) 

For any other query, Skilltech Solutions Limited can be contacted via the following details: 

Email: support@skilltechsolutions.co.uk 

Post: 30 St Thomas’ Place, Ely, Cambridgeshire, CB7 4EX 

Telephone: 01223 785635 (and then select either “Office” or “Support” from the menu) 

 

2. About us

Skilltech Solutions Limited is a private limited company, Company No. 11921513, registered in the UK. 

Skilltech Solutions Limited is part of the Lifetime Training Group, based at 291 Paintworks, Arnos Vale, Bristol, BS4 3AW. 

For the purposes of data protection law, we are Data Processors for the client companies with whom we work. 

 

3. What information we collect

We may collect the following information from users of our services: 

  • Name and job title 
  • Contact information including email address 
  • Website usage data 
  • Other pertinent information relating to learners and their apprenticeships  

 

4. Legal Basis for Processing

Skilltech does not decide the legal basis for processing. This is decided by the Data Controller and can be found in their own Privacy Policy (on their website).  

Processing is carried out solely on the documented instructions of the Data Controller. 

 

5. How we use this data

Collecting this data enables us to process the data in accordance with the requirements of the apprenticeship.  

Specifically, we may use data: 

  • To improve the products and services we provide. 
  • To contact end users and/or the awarding organisation in response to a specific enquiry, where permission has been granted. 
  • To customise the web-based applications 

 

6. Automated decision-making and Artificial Intelligence (AI)

Skilltech Solutions does not use any internal or external AI services to perform any automated decision-making.  

We do have a custom written decision engine for QA within epaPRO; however, this is not AI (Large Language Model) based. This service requires users to opt-in and is not mandatory. 

If an AI automated decision-making tool is introduced in the future, this Privacy Policy will be updated to reflect this, and the following measures will be put in place: 

  • A human will review outcomes where appropriate. 
  • Users/data subjects will have the right to request that decisions are reviewed by a person. 
  • Users/data subjects will have the option to object to automated decision-making. 

Users/data subject and/or client organisations should contact the DPO if they have any concerns about the usage of automated decision-making and Artificial Intelligence. 

 

7. Children and young people

As a provider of software which is primarily used by the education sector, we regularly process personal data relating to young people undergoing end-point assessments.  

Appropriate measures are taken to ensure that all data, including but not limited to data relating to children and young people, is kept secure at all times. 

 

8. Sharing your data

We will never lease, distribute or sell personal data to third parties, unless we have the permission of the data subject, or unless we are required to do so by the law. 

Any personal information we hold is stored and processed in accordance with our Data Protection Policy. Our Data Protection Policy is maintained in line with the Data Protection Act (2018) and UK GDPR. 

We may use sub-processors (third-party service providers) to deliver the contracted services. These are always subject to written agreements and approval by the Data Controller. 

Skilltech Software 

Purpose of Processing 

Location of Data 

epaPRO (Skilltech software) 

End-point Assessment management platform 

Processed and hosted in the UK. 

Accolade (Skilltech software) 

Accolade is Skilltech Solutions’ software for awarding bodies, chartered institutes, professional bodies and further education institutions  

Processed and hosted in the UK. 

Skilltech One 

Provides a central login with multi-factor authentication (MFA) to enable users to access different software through a single access point. 

Processed and hosted in the UK 

 

Data Processor 

Purpose of Processing 

Location of Data 

Cambridge Support 

IT managed service provider to Skilltech 

Data is held in Skilltech hosted environments, e.g. Microsoft Azure, within the UK 

Positive Internet 

Web-hosting services for Skilltech Solutions 

Cambridgeshire and Manchester, UK 

Google Analytics 

Tracks and analyses website and app data to provide insights into user behaviour and campaign performance. 

Initial processing takes place on EU-based servers, but anonymised data may subsequently be transferred to Google's central processing servers in the US, subject to appropriate security measures such as Standard Contractual Clauses (SCCs), 

Microsoft 365 

Microsoft 365, including Office and Copilot. 

Microsoft Data Centres in London, Durham and Cardiff; data may be replicated to Data Centres in the EU (e.g. Amsterdam) for resilience. 

Hubspot 

CRM - used for website changes and customer contact CRM data 

Hosted in Amazon Web Services (AWS) in Germany, EEA. 
 

Atlassian Jira 

Software used for Service Desk Internal support portal for customers, etc. 

Hosted in Amazon Web Services (AWS) in  the UK and the EEA. 

 

Where sub-processors are located outside of the UK / EEA, we ensure that appropriate safeguards are in place and inform controllers accordingly. Where this occurs, we use the UK International Data Transfer Agreement (IDTA) or other approved safeguards to protect client / personal data. 

 

9. How long we keep your data

We retain personal data only for the duration of our contract with the Data Controller and delete or return it when the contract expires in accordance with the terms agreed 

 

10. Marketing

Skilltech Solutions Limited does not contact users with marketing-related information from within their current software products (e.g. epaPRO and Accolade).  

 

11. How we use cookies

We use cookies and similar technologies to: 

  • Analyse our web traffic using an analytics package. Aggregated usage data helps us improve the website structure, design, content and functions. 
  • Identify whether users are signed in to our web-based apps. A cookie allows us to check whether users are signed in to our applications. 
  • Test content on our website. For example, 50% of our users might see one piece of content, the other 50% a different piece of content.  
  • Store information about user preferences. The website can then present users with information they will find more relevant and interesting. 
  • To recognise when users return to our website. We may show users relevant content or provide functionality they used previously. 

Users can manage their cookie preferences here: Cookie Policy 

Skilltech Solutions Limited’s software products utilise necessary cookies only; they do not collect any marketing information. 

 

12. Security

We use appropriate technical and organisational measures to keep user data safe, conduct regular audits, and require sub-processors to do the same. Our security measures include: 

  • Encryption, access controls, and secure hosting. 
  • Regular staff training on data protection. 
  • Regular security audits provided by external auditors. 
  • Our Information Security Management System (ISMS) is fully aligned with the ISO/IEC 27001: 2022 framework. We hold ISO/IEC 27001: 2022 certification.  

 

13. Your rights

Individual data subjects have the following rights under UK GDPR:  

  • Access – to request a copy of the data hold about held within our software products. 
  • Rectification – to correct inaccurate or incomplete data. 
  • Erasure – to request deletion of personal data (subject to legal obligations). 
  • Restriction – to limit how we use personal data. 
  • Data portability – to receive user/data subjects’ data in a portable format. 
  • Objection – to object to processing based on legitimate interests or marketing. 
  • Rights in relation to automated decision-making – to request human review. 

To exercise any of these rights, users/data subjects will need to direct their requests to the Data Protection Officer for the relevant Data Controller. For instance, if a user/data subject is undergoing end-point assessment using Skilltech Solutions Limited’s epaPRO software, and they wish to place a subject access request, this would need to be placed with either the end-point assessment entity or with the training provider itself. The appropriate entity, as Data Controller, may then contact Skilltech Solutions Limited and ask them to assist with this process. 

Skilltech Solutions Limited, as the Data Processor, is not able to respond directly to these requests, but will assist the appropriate Data Controller in accordance with the stipulations of UK GDPR and the Data Protection Act (2018). 

 

14. Complaints

If a user/data subject and/or the client organisation are unhappy with how we handle personal data, they should contact our Data Protection Officer (DPO) in the first instance: 

  • Email: DataProtectionOfficer@Lifetimetraining.co.uk* 
  • Post: Data Protection Officer, Lifetime Training Group, 291 Paintworks, Arnos Vale, Bristol, BS4 3AW 
  • Telephone: 0333 0143 669 (Mon–Fri: 9am–5.30pm) 

(*As noted earlier, Skilltech Solutions Limited is part of the Lifetime Training Group.) 

If a user/data subject and/or the client organisation remains dissatisfied, they can complain to the ICO: 

  • Telephone: 0303 123 1113 
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 

 

15. Changes to this policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website.